Lucene search

Jettison parser crash by stackoverflow

🗓️ 17 Sep 2022 00:41:00Reported by GoogleType

osv🔗 osv.dev👁 29 Views

Jettison parser vulnerability to DoS attacks by stackoverflow

Reporter	Title	Published	Views	Family All 82
Github Security Blog	Jettison parser crash by stackoverflow	17 Sep 202200:00	–	github
Github Security Blog	Jettison parser crash by stackoverflow	1 Aug 202319:53	–	github
Debian	[SECURITY] [DLA 3184-1] libjettison-java security update	10 Nov 202211:04	–	debian
Debian	[SECURITY] [DSA 5312-1] libjettison-java security update	10 Jan 202323:10	–	debian
Veracode	Denial Of Service (DoS)	19 Sep 202212:01	–	veracode
UbuntuCve	CVE-2022-40149	16 Sep 202200:00	–	ubuntucve
Tenable Nessus	Debian DLA-3184-1 : libjettison-java - LTS security update	12 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : jettison (ALAS-2023-2363)	4 Dec 202300:00	–	nessus
Tenable Nessus	Oracle Access Manager Multiple Vulnerabilities (Apr 2023 CPU)	19 Apr 202300:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : Jettison vulnerabilities (USN-6177-1)	19 Jun 202300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-40149
github	www.github.com/jettison-json/jettison/issues/45
github	www.github.com/jettison-json/jettison/pull/49/files
bugs	www.bugs.chromium.org/p/oss-fuzz/issues/detail
github	www.github.com/jettison-json/jettison
github	www.github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00011.html
debian	www.debian.org/security/2023/dsa-5312

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Sep 2022 00:00Current

5.0Medium risk

Vulners AI Score5.0

CVSS37.5

EPSS0.005